PatchTheCVEbumsys vulnerabilities and fixes
Recent CVEs affecting bumsys, with upgrade or downgrade steps. 8 tracked.
bumsys has 8 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 7. Most recent: 2023-05-22. Highest priority: CVE-2023-0455 (score 59/100).
- CVE-2023-2832 HIGH 7.2 UPGRADE SQL Injection in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2554 HIGH 7.2 UPGRADE External Control of File Name or Path in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2553 MEDIUM 5.4 UPGRADE Cross-site Scripting (XSS) - Stored in GitHub repository unilogies/bumsys prior to 2.2.0.
- CVE-2023-2552 HIGH 8.8 UPGRADE Cross-Site Request Forgery (CSRF) in GitHub repository unilogies/bumsys prior to 2.1.1.
- CVE-2023-2551 HIGH 8.8 UPGRADE PHP Remote File Inclusion in GitHub repository unilogies/bumsys prior to 2.1.1.
- CVE-2023-1362 MEDIUM 6.1 UPGRADE Improper Restriction of Rendered UI Layers or Frames in GitHub repository unilogies/bumsys prior to v2.0.2.
- CVE-2023-1361 MEDIUM 6.5 UPGRADE SQL Injection in GitHub repository unilogies/bumsys prior to v2.0.2.
- CVE-2023-0455 HIGH 8.8 DOWNGRADE Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta.
FAQ
How do I fix bumsys vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is bumsys being exploited right now?
None of the tracked bumsys CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which bumsys CVE should I patch first?
CVE-2023-0455 currently ranks highest (59/100): Unrestricted Upload of File with Dangerous Type in GitHub repository unilogies/bumsys prior to v1.0.3-beta..